Content Security Policy | WordPress.org

Resolved cyberpunk2020
(@cyberpunk2020)

5 years, 10 months ago
Hi,

I’m trying to etablish a Content Security Policy. But no matter what I try – as soon as its established, no matter how lax, Videos shown by lyte disappear.

What am I doing wrong?

TIA
Blechpirat
- This topic was modified 5 years, 10 months ago by cyberpunk2020.

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Author Optimizing Matters
(@optimizingmatters)

5 years, 10 months ago

are you allowing unsafe-inline? because lyte does come with inline JS that needs to work.

Thread Starter cyberpunk2020
(@cyberpunk2020)

5 years, 10 months ago

At this point

default-src 'self' https://my.site; font-src data: https://my.site; frame-src https://www.youtube.com; child-src https://www.youtube.com; img-src https://my.site; script-src 'unsafe-inline' https://my.site; style-src 'unsafe-inline' https://ajax.googleapis.com https://my.site; block-all-mixed-content;

seems to work.

Thanks for your help!

Plugin Author Optimizing Matters
(@optimizingmatters)

5 years, 10 months ago

good job @cyberpunk2020, thanks for sharing! feel free to leave a review of the plugin and support here! 🙂

have a nice day!
frank

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Content Security Policy’ is closed to new replies.

Tags

CSP

In: Plugins
3 replies
2 participants
Last reply from: Optimizing Matters
Last activity: 5 years, 10 months ago
Status: resolved